An effective training program should meet organizational needs, be task oriented and structured, be fully documented, and have the approval and support of senior management. The first step in developing a training program is to analyze the basic tasks of the security job. The next step is to review the resources that can be used for security training. The third step is to prepare a master training outline. Security training might be divided into four phases: orientation, theoretical training, practical application, and advanced/sustaining training.